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(54) Tide: A METHOD FOR SEPARATELY PERMISSIONED COMMUNICATION 
(57) Abstract 

A call contact platform (CCP) is 
provisioned with handles that belong to 
call recipients. Each recipient can have 
any number of handles in the CCP and 
each handle is associated with conditions 
under which a call employing die handle 
may be established. Specifically, when 
a party supplies a handle to a telecom- 
munication network (previously given to 
the party by the call recipient), the net- 
work contacts the CCP and interacts with 
it as required in confomtance with stored 
instructions. If appropriate, the CCP in- 
structs the telecommunication network to 
establish a connection. A recipient can 
also give a party a handle that includes 
a message, where the handle is not prc- 
storcd in the CCP. After the network con- 
tacts the CCP, the party provides the mes- 
sage, the CCP extracts instructions from 
the message, or retrieves instructions with 
the help of the message, and, as before, 
causes the telecommunication network to 
esublish a connection, if appropriate. A 
party can also obtain a handle for a call 
recipient pursuant to predefined interac- 
tions with the telecommunication network 
that provide information specified by the 
call recipient. 
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A METHOD FOR 
SEPARATELY PERMISSIONED COMMUNICATION 

Background of the Invention 
5 This invention relates to telecommunications and, more particularly, to 

methods for establishing a conmiunication path between parties. 

The classic technique for establishing a communication path between two 
parties involves a caller, say Bob, obtaining the phone number of a called party, 
say Mary. Bob dials Mary^s number and the network establishes a connection. 

10 In this classical methodology there is a known, fixed, relationship between Mary 
and her phone number. The only way for Mary to maintain anonymity or to be 
selective as to whom she would accept as a caller is to keep her phone number 
secret from most people. But even that is not as effective as may be desired 
because callers can just happen to select Mary's number and, also, once the 

15 phone number is given the information cannot be retrieved. 

In connection with accepting of calls, Mary can subscribe to a "Caller 
ID" feature where, during the ringing interval, Mary is shown the phone number 
of the caller. That allows Mary to choose whether to answer the call or not. 
However, the "Caller-ID" feature fails to preserve Mary's tranquillity because all 

20 incoming calls still ring at Mary's phone. 

Another form of selectivity is attained when Maiy has more than one 
telephone number and gives out different numbers to different people. This, 
alas, has the disadvantage of requiring Mary to have - and pay for — a number 
of different telephone numbers, and each telephone number corresponds to a 

25 different end point in the telephone network. Even in the more sophisticated 
arrangements where the phone number is not fixedly associated with a networic 
end point, and the number of end points may, therefore, be less than the number 
of phone numbers that Mary calls her own (e.g., the recipient, Mary, has a 
conventional number and an 800 number that translates to the same conventional 

30 number), there is still a charge that is levied on Mary for each number. 

Moreover, the relationship between the known numbers and the identity of the 
user is effectively fixed, since it is impractical to dynamically establish and/or 
revoke existing telephone numbers. If Mary tells somebody her private number, 
she cannot revoke that number a week later without interacting with the service 

35 supplier to obtain a new number. Additionally, she needs to divulge her new 
number to those who she wants to know the new nimiber. Because of the cost. 
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the number of different phone numbers that Mary might maintain is typically 
quite small. 

What is desired is an arrangement where a recipient can have a more 
flexible interface to the world: an interface where different callers may have 
5 different permissions for accessing Mary and where, at will, Mary can generate 
or revoke calling permissions. 

In the field of electronic mail, there exist remailers that facilitate 
communication while providing various types of enhanced privacy. In one 
mode, a sender, say Joe, having established an account with the remailer, sends a 
1 0 message to the remailer. This includes instructions on how the body of the 
message is to be delivered. The remailer removes from the incoming message 
the usual fields that identify the sender, substitutes a pseudonym, and forwards 
the body to the requested destination(s). The intended application of such 
services includes, for example, people who wish to "blow the whistle" on 
15 misconduct by their employer, government, etc. The reverse service also exists, 
whereby Joe can establish an alias at a remailer, so that mail addressed to that 
alias will be forwarded to Joe. This allows him to receive messages on 
controversial subjects (see, for example: 
http://www.welLcom/user/abacard/remail.html). 
20 For that matter, in the field of conventional postal service, letter drops, 

parcel drops, and remailers have existed for years. Among other things, such 
services allow people to communicate without, for instance, divulging their 
home addresses. 

Remailer service is obviously attractive to criminals, and service 
25 operators typically take steps to discourage this. 

Summary of the Invention 

The arrangement and process disclosed herein enables a call recipient, 
e.g., Mary, to have separately permissioned communication with different 

30 callers, e.g. Tom. This capability is achieved by means of a Call Contact 
Platform (CCP) that is provisioned by Mary, or pursuant to her directions. 
Specifically, the CCP is provisioned with handles that belong to Mary, and each 
handle specifies conditions under which a call employing the handle may be 
established, with Mary being the called party. In the context of this disclosure, a 

35 "handle" is any information that is used by a caller to reach a certain recipient. 
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This can be as simple as a conventional telephone number, a spoken utterance 
(e.g., "call Mom"), an encrypted message, etc. 

In one disclosed embodiment, Mary provisions the call contact platform 
with instructions .on how to react to a selected handle and provides this handle' to 
S Tom. When Tom wishes to call Mary, he supplies the handle to the 

telecommunication network, the network contacts the CCP and interacts vdth it 
as required in conformance with the instructions leit by Mary. If appropriate, the 
CCP instructs the telecommimication network to connect Tom to Mary. In 
another disclosed embodiment, Mary provides Tom with a handle that includes a 

10 message (probably encrypted). After the network contacts the CCP, Tom 

provides the message to the platform, the platform extracts instructions from the 
message or retrieves instructions with the help of the message and, as with the 
previous embodiment, causes the telecommunication network to connect Tom to 
Mary, if appropriate. In still another embodiment, Tom has no handle, so he 

15 contacts the CCP directly. After a predefined interaction, Tom obtains a handle 
for Mary and/or is connected to her. Thereafter, Tom can use the handle to 
contact Mary pursuant to the provisioning for that handle. 

At any time, either by a predetermined algorithm or at Mary's pleasure, 
the handle previously provided to Tom can be terminated, or the instructions 

20 relating to that handle modified. 

This arrangement can be employed in Internet telephone and data 
commimication as well as in the traditional voice telephony networic. 

Brief Description of the Drawing 

25 FIG. 1 presents a diagram of a telecommunications networic which 

includes hardware for implementing the principles disclosed herein; 

FIG. 2 presents a flow diagram for Mary to access database 120 in FIG. 

1; 

FIG. 3 is one flow diagram for a caller's interaction with the CCP; and 
30 FIG. 4 is another flow diagram of a caller's interaction with the CCP. 

Detailed Description 

Through a very simplified example where Tom and Bob are callers and 
Mary and Elizabeth are call recipients, FIG. 1 illustrates various call set-up 
35 scenarios iising today's telecommunication network 100, plus enhancements 
according to the principles of this invention. Tom can be a caller from a phone 
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in home 10, his car 20, or from a phone 30 in his work location. Elizabeth may 
be a call recipient at her home 10, Mary's home 40, or her car 50, Mary may be 
a call recipient at her home 40 or at work 60. Additionally, while Mary's phone 
at office 60 may have a conventional (POTS) telephone number by which she 
5 can be reached, she may also have an 800 number that is translated to that POTS 
number. Moreover, the translation to the POTS number at office 60 may be 
effective only during working hours, and a different translation effected at other 
times (e.g. to a person at a different time zone, or to Mary at her home 40, etc.). 
It is assumed that Tom has at least one handle by which he can call Mary, and 
10 another handle by which he can call Elizabeth. The permissions associated with 
each such handle are in Mary's and Elizabeth's purview, respectively. 

It is also possible that another caller, e.g. Bob at telephone 70, may wish 
to call Mary, but Bob has no handle for Mary and might even not know Mary. 
Bob may know Tom, however, and obtain a handle for Mary from Tom. It is 
15 also possible that Bob was given a handle by Mary, but that handle includes an 
associated message that controls the usability of the handle. 

The following discloses an arrangement where Mary can be reached 
wherever she is, and under whatever conditions she specifies. She achieves this 
dominion over connections to her through control of the handles that she gives 
20 out to callers and the conditions that she sets up for those handles. She may 
specify those conditions dynamically. 

Achieving the above involves two processes: 

• A process that allows Mary to inform the CCP of her wishes with respect to 
each of the handles that she establishes (and perhaps the corollary process for 

25 providing Bob with a handle for reaching Mary), and 

• A process by which Bob can be connected to Mary in conformance with her 
wishes. 

Connecting to Mary 

30 When Bob provides a handle to the teleconrmiunication network, the 

process of connecting Bob to Mary is much like connections to any 800 type 
number. That is. Bob provides the handle to the network, the network 
conmiunicates the handle to a processor with an attendant database, and based on . 
information provided by the database via that processor, the call is routed to a 

35 destination. In the instant case, the processor is the CCP which translates the 
handles into whatever phone number is either a) preaissigned by the network 
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(e.g., when Mary has a single number), b) specified by Mary (e.g., when she 
either has more than one number or dynamically informs the network of her 
whereabouts), or c) dynamically specified by the network (e.g. when the network 
searches for Mary and determines that she make be reached through the cellular 
5 network). 

When Bob does not have a handle, the process of connecting Bob to 
Mary comprises a subprocess whereby Bob is qualified by the CCP and perhaps 
receives a handle, and a subprocess where Bob is connected to Mary. Since Bob 
is connected to the CCP for qualification, the subprocess of making a connection 
10 to Mary is basically a call transfer process, which is conventionEil. 

Since the process of connecting to Mary is basically conventional, the 
following concentrates on explaining the features and capabilities of the 
arrangement and method disclosed herein and on the process of provisioning the 
CCP with handles for Tom, Bob, etc. 

IS 

Provisioning the CCP 

The call contact platform (CCP) is at the heart of the interactions 
involving handles. In FIG. 1 , the CCP comprises a processor 110 coupled to 
database 1 20 which contains records of handles for each recipient. For Mary, for 

20 example, database 120 may contain records for the handles given out to Tom, 
handles given out to Elizabeth, a handle given out to Bob, perhaps, etc. Each of 
those records has an associated set of instructions which dictate how, and under 
what circumstances, the handle that corresponds to the record may be translated 
to a network end point where Mary can be reached. 

25 As a service to Mary, the records may be inserted into database 1 20 by 

the telecommunications provider but, more likely, it will be foimd preferable for 
the records to be generated personally by Mary or pursuant to Mary's directions, 
without intervention from the telecommimications provider. Records created by 
Mary are inserted into database 1 20. Records created by others, such as Bob, are 

30 used but are not necessarily inserted into database 1 20. 

A Record Created By Mary 

The process for Mary creating records may be quite conventional. It can 
be a voice-based process where processor 110 comprises a conventional voice 
35 interactive system, or a data-based process where processor 1 1 0 comprises, for 
example, an Internet site. In the latter case, hypertext transfer protocol (HTTP) 
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may be used and the necessary data may be presented and formatted in HTML 
(HyperText Markup Language) forms. A flow chart that depicts this process is 
presented in FIG, 2. Electronic mail offers yet another way of communicating 
with processor 110. 

5 When Mary accesses processor 1 10 by executing step 301 in FIG. 2 (e.g., 

by dialing a predetermined number) she is guided through a menu which first 
demands that Mary identify herself (step 302) to the processor (e.g., with an 
authorization code). When processor 1 10 is satisfied of Mary's authenticity 
(step 303), it continues with subsequent steps in the menu and provides Mary 
10 with access to database 120. In those subsequent steps (step 304), Mary can 
create a new handle to be inserted in database. By editing the handles, Mary 
controls the conditions that the CCP imposes before the handle is translated to a 
valid destination. By way of example, this may include: 

• the people who are permitted to use the handle, 

15 • the level of authentication that Mary desires callers to provide, 

• the groups whose members can use the handle, 

• the times when the handle may be used, 

• the nimiber of times the handle may be used, 

• the duration of calls (per call, and/or ctmiulative) that this handle is valid, 
20 • the longevity of the handle, 

• the permitted modes of communication (e.g., voice, messaging only, e-mail 
only), 

• the handle's status (active or inactive), etc. 

25 Bob Has A Handle and A Message 

One of the possible scenarios that may be used to an advantage with the 
disclosed arrangement is when Mary meets Bob at some function and gives Bob 
a handle with an associated message. This is illustrated in FIG. 3. The message 
may simply be a code (embedded in the handle or separate from the handle), or it 

30 may be a separate and distinct set of instructions to the CCP (probably 

encrypted). When Bob wishes to call Mary, he employs the given handle (step 
305) and the network communicates the handle to processor 110. When 
prompted (step 307), Bob divulges the message and processor 1 10 reacts 
accordingly. As indicated above, the message may be simply a code. In such a 

35 circumstance, processor 1 1 0 consults a table of codes that Mary has previously 
installed in database 120, and respond (step 309) in accordance with instructions 
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associated with that code. Those instructions may simply cause processor 1 10 to 
instruct network 100 to connect Bob to Mary and cancel the handle (a one-time- 
use handle). Alternately, those instructions may cause processor 1 10 to provide 
* Bob with a permanent handle and to cancel the handle Bob first used. The 
5 permanent handle may be a pre-existing handle of some specified limited use 
that is given to unspecified people, it may be a pre-existing handle for specified 
people, or it may be a completely new handle. Of course, in the case of a handle 
for specified people, database 120 would need to augment the record for that 
handle (to add Bob to the list). Also, in the case of a brand new handle, database 
10 120 would need to create and store a new record. 

Bob Has No Handle 

This transaction, depicted in FIG. 4, allows Bob to communicate with 
Mary even when he has no handle. This is accomplished by Bob calling the 

15 CCP and requesting a handle for Mary. He either receives a handle and is also 
connected, receives a handle but is not connected, is connected but receives no 
handle, or is refused both. 

Describing this in more detail. Bob is coupled to the processor 1 10 in 
block 200 and the processor outputs a prompt, offering Bob to specify the 

20 recipient for whom he wants a handle. In response (block 201), Bob gives 

Mary's name and address, or some other designation by ^ch the CCP knows 
Mary. (For example, Mary may be the president of the her town's Garden Club.) 
Processor 1 10 accesses database 120, identifies Mary and obtains information 
about Mary's wishes regarding strangers who wish to be obtain a handle for 

25 reaching her. At this point, the situation is akin to a person contactmg the 

Information Operator and asking for the telephone number of an individual. The 
response can be just as it is today; that is, give Bob a handle by which Bob can 
call Mary (e.g., a telephone number), or refuse to give a handle ("unlisted 
number"). Additionally, in accordance with the principles disclosed herein, the 

30 CCP can also provide a number of intermediate responses. 

One response, for example, is for the CCP (in accordance with Mary's 
directions) to provide Bob with a handle without inquiring into Bob's identity 
(block 204) or just taking note of where Bob is calling from (using Automatic 
Number Identification, ANI), but that handle has a prescribed limited use. For 

35 instance, it may allow Bob to call Mary, but only once, and at a time convenient 
for Mary. 
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Another response (block 203) is for the CCP to initiate a Contact-Request 
Interaction (CRI), which requires Bob to provide information that would induce 
the CCP (pursuant to Mary's instructions) to provide Bob with a handle (or 
merely direct that Bob be connected to Mary). If Mary wishes to maintain 
5 anonymity, the CRI step need not include any information that Bob could use to 
determine Mary's identity. This situation may occur, for example, when a 
person wishes to call the president of a company. While the president of the 
company may be willing to accept a call, she may wish to not have her identity 
be known. 

10 In any event, once Bob provides the requested information, Mary's 

instructions are again consulted and an appropriate action is taken. This (as 
mentioned above) includes, for example: 

• a new handle is created for Bob, or 

• Bob is given an existing handle that accommodates Bob as a caller, or 
15 • Bob is refused a handle but a connection is nevertheless established, or 

• Bob is completely turned away, etc. 

The above suggests that Mary is not necessarily expecting Bob to call 
her. There of course can be a situation where Mary actually desires to be called, 
but for a variety of reasons Mary wishes to nevertheless control who calls, and 

20 under what circumstances. In a computer communication environment, a 

convenient implementation for such a situation may be for Mary to publish an 
HTML form on the Internet. The form can contain a text entry field into which 
Bob can write a brief message as to who he is or why he wants a handle. When 
Bob submits the form, the form's URL causes Bob's data to reach processor 1 10. 

25 The decision whether to grant a handle is made in block 202. The decision may 
be as discriminating as Mary wishes it to be. At one extreme, for example, Mary 
may choose to grant a imique handle to any person, or to any person who 
provides his or her name. On the other extreme, Mary may request that the party 
wishing to get a handle submit information and a password that was given to that 

30 party by someone who is known to and trusted by Mary, or be vouched for in a 
formal way by a third, trusted, party. Once a decision is made to grant a handle, 
block 204 causes processor 1 10, in cooperation with database 120 to generate a 
handle (if a new one is needed) or select an existing one. The information 
provided by Bob is recorded in database 120 together with the handle assigned to 

35 Bob and, finally, the handle is provided to Bob. Optionally, according to block 
204, the CCP directs network 100 to connected Bob to Mary. Of course, when 
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the decision is made in block 103 that a handle should not be given out, then 
block 106 may be included to so inform Bob. 

It may be noted that while the above describes the "publishing" of 
Mary's form by the CCP, it need not be. That is, Mary might publish such a 

5 form herself, for example, on her own Internet site, and handle the transaction of 
granting or refusing a handle without interaction with the CCP. Of course, after 
she grants a handle she may need to access the CCP and modify data 120 as 
described above. It may also be noted that when the CCP is coupled to Bob via 
the Internet and provides Bob with a handle, then the CCP can also obtain from 

10 Bob his own voice telephone number and, if appropriate, engage the voice 

telecommunication network and have it establish voice communication between 
Bob and Mary. Obviously, it can also establish a conventional Internet path 
between Bob and Mary and that path can be used for data, voice, video, etc. 

15 Changing A Handle 

It is possible that the process whereby Tom identifies himself to the 
system is strongly resistant to compromise (whereby handles might become 
known to an untrusted third party, say Roger), but it is also possible that for 
convenience a less-strong method may sometimes be used, and even the best 

20 methods sometimes foil. Since presumably Tom values Mary's trust, when Tom 
believes that his handle for Mary has become compromised, he may wish to 
revoke it and obtain a new one. He could, of course, obtain a new handle ab 
initio, directly from Mary, or by whatever means the first one was obtained. 
However, preferably this revocation and reissuance process should not place a 

25 burden on Mary, the idea being that Tom is responsible for the integrity of 

handles issued to him. The system may require Tom to provide stronger-than- 
routine identification during the revocation and reissuance process, to keep 
Roger from subverting that, too. It is also possible that in cases of suspected 
compromise, a handle may be partially revoked, disabling certain permissions 

30 (e.g., telephony) while retaining others (e.g., electronic mail). 

Contact-Status 

In this transaction the CCP enables Bob to obtain information about the 
status of his handle for a particular subscriber. In computer commimication, this 
35 facility may be implemented by providing a contact status URL. When Bob 
invokes this URL and provides Mary's handle, the CCP returns an HTML 
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document, constructed from a query to the contact database using Mary's handle, 
and the HTML document contains a summary of the current permission of the 
handle. This capability allows Bob to know the conditions under which the 
network will complete his call attempts to Mary and avoids wasting his time and 
the network's resources. 

Permission-Review 

The CCP provides a facility for Mary to submit her identity to processor 
1 1 0 and thereby be allowed to review the current status of handles she has 
issued. She can then adjust the permission level for each handle separately, or 
group of handles. A convenient browsing and updating arrangement is for Mary 
to send an HTTP request, and for her handles and permission data to be returned 
as an HTML document that displays the current handles with their pennissions. 
These forms enable Mary to send back instructions to alter the permissions or to 
revoke certain handles. This is a straightforward database viewing and updating 
application that can employ conventional Internet communication tools. 

Third Party Identity Verification 

In the prevention of harassment, the contact-request interaction presents a 
security weakness. A harassing caller who has had his handle revoked by an 
irate Mary may simply request another handle using one of Mary's public 
contact-request initiators. As suggested above, a solution for this is to provide 
an option to insert an identity verification step into block 203 of FIG, 4 to verify 
that Bob is trustworthy. This may be achieved by subjecting the caller ~ e.g.. 
Bob - to a third-party certification of Bob*s identity. Computer 1 10 sends a 
challenge string C and its public key KPul to Bob, who commimicates C and 
KPul to a trusted third party together with whatever other information the 
trusted third party requires. The trusted third party makes its determination, D 
(containing the identity of Bob and perhaps some other information), combines it 
with C to form string DC, encrypts DC with KPul to create string DC and 
forwards DC to processor 1 10. Processor 1 10 decrypts DC with KPrl, 
confirms that the received string is responsive to challenge string C, evaluates D, 
and proceeds appropriately. 

In the simplest embodiment of the principles disclosed herein. May have 
different handles for different potential callers, and a caller would have one 
handle for Mary. More generally, a caller may wish to communicate with Mary 
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using any of a range of communication methods such as conventional telephony, 
electronic mail, an interactive text chat protocol, or a packet telephony protocol, 
and for each communication method the caller may be given different handles 
for Mary. Put another way, the arrangement disclosed herein allows Maiy to 
5 keep all points of access to her under strict control; not just access to her voice 
phone. Therefore this solves the problem of junk' e-mail and junk faxes as well 
as junk phone calls. As an aside, a caller may also have different handles for 
Mary based on different network end points where Mary can be reached (OK to 
be called at the office, but not OK to be called at home). 

10 The control afforded to Mary can also be employed to achieve selected 

one-way communication. For example, a pollster can publish a handle for the 
purpose of callers voting on a particular question. Callers call in and are thus 
counted. Callers can also be requested to leave specified information for a finer 
determination of the question at hand. 

15 it should also be noted that the arrangement disclosed herein offers an 

altemate caller ID feature. Since Mary can demand to know (and verify) the 
identity of a caller before the caller is granted a handle, that data can be included 
in the CCP. When the CCP is consulted by the network when Tom attempts to 
call Mary by providing the handle he has for Mary, it is quite straight forward for 

20 the CCP to include Tom's identity in the information provided to the 

telecommunication network. The network can then provide Tom's identity to 
Mary during ringing or immediately ^en she picks up the conunimication. 
This altemate caller ID feature complements and improves over the conventional 
caller ID feature which merely identifies the telephone line that is used to make 

25 the call. The latter provides only circumstantial information about who the caller 
is: the same person may call from different lines, and different people may call 
from the same line. Moreover, caller-ID is sometimes unavailable, and it can 
also be withheld by the caller. A handle, on the other hand, must always be 
supplied for the caller to be able to get through, and it is specific to the person 

30 calling if Mary so wishes it, not the line. 

The disclosure above addressed the notion of computer commimication 
such as e-mail, illustratively using the Internet, as well as the notion of voice 
telephony. It should be understood, however, that other approaches are also 
possible, such as a combination of the data and voice. Aside from the notion of 

35 voice telephony that actually traverses the Internet and appears to the 

communication chaimel as digital data, there are also the currently prevailing 
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user arrangements where a "plain old telephone" is situated at a desk alongside a 
computer that is connected to, for example, the Internet. As indicated above, the 
principles disclosed herein are easily applicable to this arrangement. 
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Claims: 

1. A method for providing a telecommunication network service to a 
recipient, said method comprising the steps of: 

5 receiving a call from a special party (301); 

based on recipient-provided infonnation in a database and said special 
party-provided information, assembling instructions (304) that define conditions 
under which a caller can be connected to the recipient, the instructions being 
selected from a set that includes establishing a new handle by which the recipient 
10 can be accessed; and 

acting on the instructions. 

2. The method of claim 1 where the call from said special party 
comprises digital communication. 

15 

3. The method of claim 1 where said special party is the recipient, the 
instructions include a handle, and the step of acting on the instructions comprises 
modifying the database to indicate that a connection from the caller to the 
recipient may be established by the telecommunication network when the caller 

20 provides the handle to the telecommunication network. 

4. The method of claim 1 where said special party is the caller and the 
instructions provide a handle to the caller. 

25 5. The method of claim 1 where the instructions also cause said 

telecommunication network to connect the caller to the recipient 

6. The method of claim 5 where the call from said special party either 
carries analog signals or digital signals but the connection established between 
30 the caller and the recipient is analog. 
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7. The method of claim 5 where the call from said special party either 
carries analog signals or digital signals but connection established between the 
caller and the recipient is digital. 

5 8. The method of claim 4 further comprising the step of modifying the 

database to permit the caller to be connected to the recipient when the caller 
provides the handle to said telecommunication network, 

9. The method of claim 1 where said special party is the caller and the 
10 instructions cause the caller to be connected to the recipient. 

10. The method of claim 1 where at least some of the instructions are 
embedded in a handle submitted by the caller. 

*5 11. The method of claim 10 where the instructions are encrypted. 

12. The method of claim 1 where the step of acting on the instructions 
comprises a decision whether to connect the caller to the recipient. 

20 13. The method of claim 1 where the instructions specify one or more 

conditions that must be met in order for a caller to be connected. 

14. The method of claim 13 where the conditions are selected from a set 
comprising the identity of the caller, membership in a specified group, number of 

25 calls made, call duration, date, longevity of the handle, mode of communication, 
a requirement to obtain information from the caller, a requirement to confirm 
identity of the caller via a trusted third party, and status. 

15. The method of claim 9 where the instructions revoke a caller's 
30 ability to be connected to the recipient by means of a given handle. 

16. The method of claim 9 where the conditions of different handles by 
which callers can be connected to a recipient are different. 
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17. A method for administering contact addresses for users, said method 
comprising the steps of: 

a potential caller contacting a call contact system, identiiying the caller 
5 and requesting a contact address for a called party; 

said call contact system performing a predetermined verification 
procedure; and 

said call contact system providing the putative caller with a contact 
address for the called party. 
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